diff --git a/ansible/roles/tailscale_serve/defaults/main.yml b/ansible/roles/tailscale_serve/defaults/main.yml
index 3f775fd..1f70f8d 100644
--- a/ansible/roles/tailscale_serve/defaults/main.yml
+++ b/ansible/roles/tailscale_serve/defaults/main.yml
@@ -6,6 +6,8 @@ tailscale_serve_services:
   # NOTE: svc:grafana, svc:pg, svc:feed, svc:pypi removed - now hosted in k8s
   # NOTE: svc:k8s is configured by the minikube role (port is dynamic with docker driver)
 
+  # NOTE: svc:kiwix removed - now hosted in k8s (see argocd/apps/kiwix.yaml)
+
   - name: svc:forge
     https:
       port: 443
@@ -14,11 +16,6 @@ tailscale_serve_services:
       port: 22
       upstream: tcp://localhost:2200
 
-  - name: svc:kiwix
-    https:
-      port: 443
-      upstream: http://localhost:5501
-
   - name: svc:registry
     https:
       port: 443